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[57] ABSTRACT 

An information distribution system provides informa- 
tion to a user, when the information corresponds to 
criteria individually selected by the user, and then 
charges the user only for the selected information thus 
provided. Encrypted information packages (IP's) are 
provided at the user site, via high and/or low density 
storage media and/or by broadcast transmission. The 
IP's selected by the user are decrypted and then printed 
or displayed for viewing by the user. The charges for 
the IP's thus displayed are accumulated within the user 
apparatus and periodically reported by telephone to the 
system's central accounting facility which issues en- 
cryption keys. The encryption keys, used to decrypt the 
IP's, are changed periodically. If the central accounting 
facility has not issued a new encryption key for a partic- 
ular user station, the station is unable to retrieve infor- 
mation from the system when the key is changed. 

10 Claims, 12 Drawing Sheets 
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such as the stock quotation service, cannot "unplug" a 

INFORMATION DISTRIBUTION SYSTEM subscriber in this way. The information is therefore 

available to any user who has a suitably adapted re- 
CROSS-REFERENCE TO RELATED ceiver, whether or not they have a subscription to the 
APPLICATION 5 service. 
This application is a continuation, of application Ser. In considering information distribution services, it is 
No. 366,150, filed Jun. 14, 1989, now abandoned which helpful to distinguish between "archival" information, 
application is a continuation-in-part of application Ser. as may be contained in a large databank, and current, 
No. 338,275 of Peter J. Sprague, Thomas H. Lipscomb up-to-date information, which may be distributed in a 
and John R. Michener filed Apr. 14, 1989, which, in 10 serial data stream by telephone line, cable or RF broad- 
turn is a continuation-in-part of application Ser. No. cast, or via inexpensive storage media physically sent to 
07/232,706 of Peter J. Sprague and Thomas H. Lip- . the user. The former type of information has classicly 
scomb filed Aug. 16, 1988 and entitled "INFORMA- been made available from large, on-line, computer data- 
TION DISTRIBUTION SYSTEM", both abandoned. bases and distributed by a time sharing system which 

BACKGROUND OF THE INVENTION include a local m network (LAN), telephone 
^ ( lines, duplex cable, microwave or satellite transmission 
The present invention relates to the provision of in- lines< With ^ ^vent of high density storage media 
formation services to multiple users and, specifically, to such ^ the c0 t disk> it has hmm convenient to 
a method and apparatus for distributing mformation to furnifih signiflcant quan tities of archival information on 
users in the field and for accounting financially for the 20 ^ ^ memories (CD-ROMS). CD- 
irfonutn ^tnbuted to, and selected and received by RO * s md ^ ^ ^ ^ media > ^ 
each user. More particularly, the present invention re- ' ^ ± v * Postal Service, United 
lates to the provision of a protected archival databank at „ F ^ , « • c J Vr= i-I 
the user site which permits rapid selection and retrieval Pa f cel Servic f* F l ederal E *P r « s > ° r like, 
of information. The present invention also relates to the 25 ^ is presently the practice of mformation providers to 
provision of mformation distribution services wherein char * c a ^e-time fee for the information stored on such 
an alphanumeric character stream containing up-to-date m S h density media. The charge for a typical CD-ROM 
information is serially broadcast to users in the field for containing, for example, the entire works of Shake- 
selection by each individual user. In addition, the pres- s P eare mu s* necessarily be prohibitively expensive to 
ent invention relates to a method and apparatus for 30 many users since the entire value of the information has 
providing users with up-to-date information in a "seam- to be recovered at once. This high initial charge has the 
less" manner from both an archival databank and peri- effect of limiting the number of potential customers for 
odic updates which are either broadcast or transmitted such information, thereby reducing the user base upon 
by storage media. And furthermore, the present inven- which the information cost can be amortized. This has 
tion relates to a method and apparatus for controlling 35 the effect of maintaining the information charge at an 
and monitoring the access to information by a plurality. inordinately high level, a "Catch 22" situation which is 
of individual information users. disadvantageous for both the information provider and 

Various information services are available which the user, 
provide individualized up-to-date information to a user. The provision of archival information via high den- 
For example, electronic mail services are available via 40 s j ty me dia which can be read at the user site leaves open 
telephone lines to users of computer terminals. These the question of periodic updates of current information, 
mail services are based, financially, on either a flat rate Th e high density media themselves are too expensive to 
subscription or like dial-up database search services, a be frequently replaced by media containing the current 
user fee which is dependent upon the amount time updates> nor „■ such u ^ ated media necessarily re- 
spent and type of data provided to the individual user 45 ircd It is conceivable t0 issue "editions" of the archi- 
However, these electronic mail and database search val fi media ( w h density CD . ROM S) at 
services are costly because the separate information , riodic ta ^ ( , } ^ ^ ^ 
transfers tie up central computer facilities and telephone ^ tQ ^ foj^ to maintain 

Other current information services simply provide a 50 itS C ^%^ * fr ^ en * b f is *ily. w ^ or 

stream of information which is broadcast over AM, monthly) The current, update information can be sup- 

FM, TV or satellite channels via cable or electromag- P hed . via , tele P honc imes broadcast channels, or inex- 

netic radiation. For example, continuous weather £ ensivc J™ mcdia . such f* «»8«f c or 

broadcasts and sales information provided by retail floppy disk, as frequently as is required and the mforma- 

merchants are available to cable subscribers for a flat 55 t,on contawied on these mcdia ma y stored in the 

fee. Also, stock quotations broadcast on an FM side- uscr ' s s y stcm < for example on a hard disk memory or 

band frequency are available to persons having spe- optical read/wnte memory). 

cially adapted receivers. Furthermore, weather and In the user 31,(1 retrieval from this repeatedly 

navigation information are provided by U.S. govern- updated databank it is desirable to provide a "seamless*' 

ment FM broadcast stations on specially assigned fre- 60 source of information so that the user need not know 

quencies. where the information is actually stored. In such a sys- 

Government weather and navigation information tern, the type and nature of the storage media are said to 

services are supported by public funds. However, the be "transparent" to the user, who only sees the entire, 

cable TV information services and the stock quotation updated databank as a unit. To the user, therefore, the 

service must be supported by charges to the user-sub- 65 two types of information described above— namely the 

scribers. Cable TV service, like the telephone, can be archival databank stored locally on a high density 

disconnected for non-payment, but the charge is a flat media and the current, updates stored locally on lower 

rate for all subscribers. Broadcast information services. density media, are preferably indistinguishable. 
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SUMMARY OF THE INVENTION 

It is a principal object of the present invention to 
provide a low cost, personalized information service. 

It is another object of the present invention to distrib- 
ute vast quantities of information to a user site, both as 
an original, one-time archival databank and as periodic 
updates on a continuing basis. 

It is another object of the present invention to pro- 
vide and maintain a local databank at a user site which 
may be accessed by the user, as desired, in a seamless 
manner. 

It is a further object of the present invention to pro- 
vide a periodically updated databank, on site to a user, 



charged to the user. After placing the selected informa- 
tion in this second storage device the user may direct 
that it be supplied to a hard copy reproduction device 
such as a printer, to another computer via an SCSI bus 
5 or local area network, to a remote location via a tele- 
phone line, cable or other transmission link, or even to 
another storage device, such as a hard disk. 

The charge for the information selected and retrieved 
from the first storage device and placed in the second 
10 storage device may be based on the number of alpha- 
numeric characters, number of words, or some other 
unit of measurement. Preferably, and in accordance 
with a particular feature of the present invention, the 
use fee for the information is based on a so-called "infor- 



so as to minimize telephone usage and central computer 15 mation packagc » hereinafter sometimes referred to as 



processing time 

It is a further object of the present invention to pro- 
vide a system for financial accounting of information 
distributed to, and selected and received by a user. 

It is a further object of the present invention to pro- 20 
vide a system for accounting financially for information 
distributed to, and selected and received by a user 
which permits a user to conveniently "charge through" 
the use of the information to the user's separate ac- 
counts or clients. 25 

It is a further object of the present invention to pro- 
vide a system for distributing information to a user 
which is extremely secure from attack and tampering by 
a third party and/or by the user him/herself. 



an *'IP". Thus, the information stored in the first storage 
device may be arranged, and is retrievable as a plurality 
of information packages (IP's), and the user is charged 
in accordance with either a standard use fee for each IP, 
or in accordance with a specific use fee associated with 
each different IP that is transferred to the second stor- 
age device. To facilitate the charge by use fee, each IP 
is preferably provided with a "header" portion of the 
package which may include such information as its 
identification (title, author, publication date, abstract 
and the like), its length, and the specific use fee associ- 
ated with that IP. The header identification information 
is useful for search purposes as well as to permit a user 



It is a further object of the present invention to pro- 30 t0 scan the sub J ect matler of an IP before seIec *ing and 

retrieving the entire IP. 

The user fee charged for each information package 

that is transferred to the second storage device may thus 

be a specific use fee associated with the respective IP; a 

35 standard use fee for each IP (irrespective of the identity, 

type or length of the IP); a class-dependent IP which is 

the same for all IP's of a common class, but is different 

for IP's of different classes; and/or a length-dependent 

user fee which is determined by the length of the infor- 



vide a system for accounting financially for information 
distributed to, and selected and received by a user 
which accounting system is extremely secure from at- 
tack and tampering by a third party and/or by the user 
him/herself. 

It is a further object of the present invention to pro- 
vide a system for controlling and monitoring access to 
information by a plurality of individual information 
users. 



It is a further object of the present invention to pro- 40 nation transferred to the second storage device. User 



vide an information distribution system which has cer- 
tain information storage capability of its own but which 
is capable of obtaining information from outside sources 
such as a local area network (LAN) file server or a 
dial-up database. 

These objects, as well as further objects which will 
become apparent from the discussion that follows, are 
achieved, according to the present invention, by pro- 
viding at the user site: 



subscription fees may be charged to cover all or a por- 
tion of the user fees charged for information of a certain 
type or class. 
In accordance with a further feature of the present 
45 invention, the first storage device contains both archi- 
val information, which is transmitted to the user either 
on a one-time basis or at repeated intervals that are 
relatively long in time (e.g. one year), and current, up- 
date information which is repeatedly transmitted to the 



(a) a first, protected storage device, such as a high 50 u $er at relatively short intervals of time (e.g. one day, 



density storage medium and reader, for storing informa- 
tion for subsequent selection and retrieval; 

(b) a second storage device, such as a random access 
memory (RAM) or hard disk drive, for storing informa- 
tion to be received by the user; 

(c) a device, such as a programmed microcomputer, 
for selecting and retrieving information from the first 
storage device and for transferring such information to 
the second storage device; and 

(d) a device, such as the aforementioned microcom- 
puter, for accumulating use fees for the information 
transferred to the second storage device so that the user 
can be charged for the particular information that is 
received and used. 



week, month or the like). The current information, 
which comprises updates to the archival information, 
may be either continuously or intermittently transmit- 
ted from a central location to a plurality of user stations 
55 at remote locations as a serial data stream or provided 
via inexpensive low density storage media. 

The user stations are operative to select data from the 
data stream or low density media and store the selected 
data either in the first storage device (if it is to update 
60 the archival information) or the second storage device 
ftf it is to be immediately used). Each user station also 
accumulates charge information corresponding to the 
selected information that has been deciphered and 



stored in the second storage device (protected informa- 
Conceptually, the second storage device thus be- 65 tion stored in the second storage device will not be 
comes the "conduit" for monitoring the use of informa- billed for until it is decrypted). In this way, the user can 
tion: both archival and update information. All informa- be charged for the particular information that was se- 
tion placed in, and passing through this conduit is lected, received and used. 
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According to still another feature of the present in- which are of interest to the information user. If an IP is 

vention, the first, protected storage device includes one selected for storage, it may be stored on electronically 

or more of a CD-ROM, a hard magnetic disk, magnetic readable, high volume media such as a hard disk, floppy 

tape, optical tape, electronic paper and an optical read/- disk or streaming tape. 

write memory. The second storage device includes one 5 According to still another feature of the present in- 
or more of a random access memory (RAM), such as a vention, the IP's stored in the first storage device each 
semi-conductor dynamic RAM, and a hard disk mem- includes an unique IP identifier, such as an identifying 
ory. title, author and source citation or an identifying nunv 
According to still another feature of the present in- ber code. The accumulator device stores the identifier 
vention, the accounting function of the information 10 of each IP that is transferred to the second storage 
distribution system is implemented by a device, such as device. This IP identifier information can be made 
a key pad, for entering a user-specified account identifi- available to the user and/or can be transmitted via a 
cation. In addition, the device for accumulating use fees telephone line to a host computer at a central account- 
is made capable of storing this account information in ing office so that use statistics may be compiled and 
association with the identity of an IP that is transferred 15 payments may be made to the creators of the respective 
to the second storage device (i.e. ( information for which IP's. 

a user fee is charged). According to a still further feature of the present 

According to still another feature of the present in- invention, the accumulator device encrypts the infor- 
vention, the archival information as well as the current mation stored therein, such as the accumulated use fee 
information updates which are stored in the first storage 20 information and the IP identifier information, which is 
device are encrypted to prevent access to this informa- transmitted to the central host computer. Such encryp- 
tion by unauthorized persons, including users who are tion makes it difficult, if not impossible, for a user to 
deliquent in payment. fraudulently change the IP use information so as to 

According to a still further feature of the present reduce the user fees, 
invention, the user apparatus includes a telephone line 25 According to a still further feature of the present 
interface, such as a modem, and is operable to transmit invention, the system includes a keyboard or the like for 
the accumulated use fees via the telephone interface and entering the persona] identification code (PIC) of each 
a telephone line to a host computer at a central account- system user. By requiring each user to enter a PIC, the 
ing (and billing) office. This host computer is presum- system can control and monitor the information distrib- 
ably operated by the information service company 30 uted by the system. In particular, the system stores the 
which provides an distributes the information to the PIC in the accumulator device in association with each 
users and keeps financial track of the information se- IP identifier and user fee corresponding to an IP trans- 
acted and used by the users. ferred from the first storage device to the second stor- 

The transfer of financial accounting information may age device. A record is therefore kept of the identity of 

be automatically initiated, or initiated by a telephone or 35 each IP obtained from the system and the identity of 

broadcast inquiry by the information service company. each user who obtained that respective IP. 

If automatically initiated, the accumulated use fees may According to a still further feature of the present 

be transmitted spontaneously and periodically at pre- invention, the system includes a device for storing the 

scribed intervals. Alternatively, or in addition, the accu- PIC of all users who are authorized to receive informa- 

mulated use fees may be transmitted spontaneously 40 tion and a device for comparing the PIC entered by 

when the accumulated fees reach a prescribed amount. each user with the PICs of the authorized users and for 

As is indicated above, the first, protected storage enabling the operation of the system if the PIC entered 

device may contain both archival and current, update by a user is equal to a PIC of an authorized user. In this 

information which is available to the user in a "seam- way, the system is capable of limiting the access to 

less" manner. To acquire the current, update informa- 45 information to only those users who have previously 

tion, according to a still further feature of the present been authorized. 

invention, the system further includes a broadcast re- According to a still further feature of the present 
ceiver for receiving information transmitted from a invention, at least a portion of the information stored in 
remote location and for storing the transmitted informa- the first storage device is encrypted and the system 
tion in the first storage device. This broadcast receiver 50 comprises a device for decrypting the information se- 
maybe an RF receiver, for example, for receiving infor- lected and retrieved. Alternatively, or in addition, the 
mation broadcast via satellite or by a local broadcast first storage device can include a mechanical or electri- 
station from the remote location. Preferably, the infor- cal "lock", or some other conventional security device, 
mation is transmitted during the vertical blanking inter- for preventing the information stored therein to be read 
val of a television signal or on an FM sideband in accor- 55 out by anyone other than an authorized user. The lock 
dance with well-known principles and using commer- preferably includes a mechanical or electrical "key" to 
daily available equipment. The broadcast receiver may which only an authorized user has access, 
also provide a cable interface for information which is Similarly, at least a portion of the information re- 
transmitted (broadcast) via cable from the remote loca- ceived by the receiving device is encrypted and the 
tion or from a local satellite receiving station. 60 system includes a device for decrypting that informa- 
According to still another feature of the present in- tion, received by the receiver, which is selected and 
vention, each IP received from the remote location retrieved. 

includes an IP-identifying header which facilitates the As a consequence of the encryption and security 

selection of that information which should be stored for devices, as described above, the information transmit - 

future use in the first storage device. For example, this 65 ted, received and/or stored by the system remains se- 

header may identify the source of the IP, or the class or cure against unauthorized use and unlawful copying, 

type of the IP. In addition, the header may contain an According to a still further feature of the present 

abstract of the IP which can be tested for key words invention, the system includes a device, such as a printer 
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or facsimile machine, for producing a user-visible copy Summarizing the above, the underlying concept of 

of the information transferred to the second storage the present invention is to distribute both archival and 

device. current information to a user in a seamless manner and 

According to a still further feature of the present to charge the user individually for each piece of infor- 

invention, the system includes a telephone line inter- 5 mation (character, word, information package or the 

face, a third storage device and a device for calling a like) which is accessed from a protected storage device 

remote host computer via the telephone line interface at the user site. This concept allows the wide-spread 

and requesting transfer of selected information from distribution of the protected information (by physical 

that host computer to the third storage device. Prefera- distribution of high density and low density storage 

bly, the system also includes a device for storing a trans- 10 media as well as by broadcast) at an extremely low 

action record of the information transferred from the entry cost to the user, because the cost of the service 

host computer to the third storage device. need not be recouped by a one-time fee. 

If the information transferred from the host computer The combination of archival information storage and 
is arranged in a plurality of IP's, the transaction record retrieval with broadcast or distributed updates of the 
can include the identity of each IP that is transferred to 15 archival databanks is alone of significant importance to 
the third storage device. If the host computer includes ^ information user The ability to provide such a ser- 
at least one database, the transaction record can further vice witn a small or no initial fee md t0 char g e the user 
include the identity of the database from which the on i y for the information actually selected from the data- 
information is transferred to the third storage device. If bank— i.e., providing the information on a "pay as you 
the system includes a device for entering a user-sped- M g0 » basis-brings this information service within the 
tied account identification, the transaction record can financial reach of virtually every person or legal entity 
also include this account identification in association ^ has a need for the i n f onn ati 0 n. 
with the identity of each IP that is transferred to the For a m unders tanding of the present invention, 
third storage device 25 reference should now be made to the following detailed 

Preferably, the information stored in the third storage descrip tkm of the preferred embodiments of the inven- 
device is encrypted for subsequent decryption by the tion and t0 the accom p anyin g drawings, 
system. In the alternative, or in addition, the third stor- 
age device itself includes a security device, such as a BRIEF DESCRIPTION OF THE DRAWINGS 
mechanical or electrical "lock", for preventing the in. 30 FIG. 1 is a functional block diagram of a broadcast 
formation stored therein to be read out by anyone other information monit oring and retrieval system in accor- 
than an authorized user dance wUh Qne ferred embodiment of the present 

According to a still further feature of the present invention 

^ * e systm includes a local area network FIG. 2 is a functional block diagram of a user station 

(LAN) interface, a third storage device and a device for 35 , ^ {n ^ illustrated , RG 

accessing a data storage file server via the LAN inter- ~ Tr r , . , r , . 

f j » *• * r r i j • r FIG. 3 is a representational diagram of the data 

face and for requesting transfer of selected information ♦ Z • *u * •« . . j - - 

«i * *i. j * stream format used in the system illustrated in FIG. 1. 
from the data storage file server to the third storage A . f i . , , - A . 
device. Preferably, a transaction record of the inform! f FIG : 4 1S a f ^ional block diagram of the central 
tion transferred from the data storage file server to the 40 tra ™ °" ?1 acc °^? S facihty * ,n the 
third storage device is maintained in much the same '" u ? trated ,n FIG ' f u . ■ 
manner as the transaction record described above in n FIG 1 . 5 » a ^presentational diagram showing the 
connection with information transferred from a remote flow of in f°™ at,on > n «*' broadcast information mom- 
host computer tonng and retrieval system illustrated in FIG. 1. 

Preferably also, security of the information obtained 45 n FIG : 6 r is a "presentational diagram showing the 

from the file server is maintained by encrypting the flow of mforrnatlon in 311 archival information search 

information stored in the third storage device and/or by and retrieval svstem according to the present invention, 

providing a security device, such as an electrical or FIG * 7 1S a representational diagram showing the 

mechanical lock, for preventing the information stored flow of information in an archival information search 

in the third storage device to be read out by anyone 50 md retrieval system according to the present invention 

other than an authorized user. which receives updates by broadcast and/or other me- 

According to a still further feature of the present dia * 

invention, the system may be employed to transmit F 10 * 8 is a representational diagram showing the 

selected and secure information from the user's location block structure and connecting communication links 

to a remote location, for example via a telephone line 55 employed in the information distribution system illus- 

interface and telephone lines. A transaction record is trated in FIG. 7. 

maintained of the identity of all IP's that are transferred FIG - 9 is a representational diagram showing the 

to the remote location and the accumulator device ac- general structure of the information distribution system 

cumulates use fees for the transfer of this information. illustrated in FIGS. 7 and 8. 

Preferably, all information transferred in this way is 60 F *G. 10 is a block diagram showing the basic ele- 

encrypted during transmission and decrypted at the ments of the information distribution system illustrated 

receiving end. If the information is not encrypted while in FIGS; 7-9. 

stored in the system, the system encrypts this informa- FIG. 11 is a block diagram showing the broadcast 

tion prior to transmission. data reception unit of the information distribution sys- 

Similarly, the system may be used to receive and 65 tem illustrated in FIG. 10. 

decrypt IP's which are transmitted to it from a remote FIG. 12 is a block diagram showing the control unit 

location and to generate a transaction record of each of the information distribution system illustrated in 

such transmission. FIG. 10. 
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FIG. 13 is a block diagram showing the user unit of cuit 40 so that the customer terminal 30 may be used to 

the information distribution system illustrated in FIG. receive more than one data signal. For instance, the 

10* news service bureau 10 may provide an additional chan- 

FIG. 14 is a flow chart illustrating the master pro- nel that carries only specialized information such an 

gram employed with the information distribution sys- 5 scientific, medical, or legal reports, in addition to the 

tem illustrated in FIG. 10. gencra i ncws channel. 

FIG. 15 is a flow chart showing the billing program The data output by the security circuit 42 represents 

employed with the information distribution system illus- clear tcxt , without the compression and encryption that 

trated in FIG. 10. was a< j(j e< j w hen the information was transmitted, ac- 
DESCRIPTION OF THE PREFERRED 10 companied by billing and statistical usage information 

EMBODIMENTS which remains encrypted. The format used by the sys- 

, T - , - tem divides the data stream into blocks of information. 

News Service Embodiment ttee h]ocks of information m temp0 rarily stored in 

A presently preferred embodiment of an information an information buffer 44. While a block of information 
distribution system according to the present invention, 15 is stored in the information buffer 44, a comparator 46 

that provides personalized news service, is shown in compares the clear text in that block of information to 

FIG. 1. News reports, stock market quotations, sports the key words and word patterns stored in the key word 

scores and analysis of financial and political trends from buffer 48. 

sources such as news magazines, newspaper reports and Information is input to the key word buffer 48 from 
press releases, are all collected at a news service bureau 20 the keyboard 38 as words or ^ word patterns— such as 

or base station 10. At this base station 10 they are edited, the word patterns conventionally used to search com- 

compressed and serialized to form a serial data stream . mer cial data bases, which are defined by combinations 

that conforms to the transmission format used by the 0 f Boolean operators and word location parameters, 

system. Also, in addition to the various information If ^ comparat or 46 finds the key word or word 

sources 12, a sig*alfrom a signal source 14 is aho pen- 25 ^ fa ^ ^ Qf ^ ^ of information is 

odically added to the data stream for use : in the cus- transferred Mediately to a main memory 50. If no 

tomer accounting operation, as wil be described m corres ^ ndcncc is found , thc block of information in thc 

detail below In particular one funcUon of this signa infonn £ ion bufTer u is written oveF) once the informa . 

source 14 is to add to each block of information the cost .. . «. . f „ , ... ... . i. r . 

of this block if it is selected by a customer. The data 30 * on b jf er 15 ™ ] > bv th * next of information trans- 
stream is then encrypted before being transmitted to fer ? d from the secm % circmt 42 > wlthout bein * saved 
communications satellites 16. m toe main memory 50. 

Each communications satellite 16 then retransmits Tbe ***** «f ^formation in which the selected key 

the data stream to local FM or TV stations 20 and di- wo f ds or word P atteras have been found ma V a ccu- 

rectly to customers who are equipped to receive satel- 35 moated in the mam memory 50 and/or passed lmmedi- 

lite communications. The local broadcast stations 20 ateIv t0 one of a number of different display, reporting 

retransmit the compressed and encrypted data as FM or ar chive devices. These devices may include one or 

side-band information or as information carried in the more Vlde0 displays, voice synthesis devices, telefax 

vertical blanking interval of the video signal to cus- equipment, printers and optical or magnetic recording 

tomer terminals 30. The signal received by the custom- 40 devices. 

er's antenna 26 from the satellite 16 or the local broad- In the preferred embodiment shown in FIG. 2, blocks 

cast station 20 is then processed by the customer termi- of text from tne information bufTer 44 that are trans- 

nal 30. ferred to the main memory 50 may be transferred by 

The customer terminal 30 is only operable when a direct memory access to a signal converter 54 which 

key card 34 containing the encryption code currently in 45 changes the standard ASCII format in the block of text 

use, and any other information necessary to permit that t0 a facsimile format for use by a facsimile printer, and 

particular customer terminal to decode the transmitted t0 an RS-232C asynchronous data port 56. Other for- 

data stream, is inserted into the customer terminal 30. mats, such as Postscript, may be used for output of text 

For instance, each customer terminal may require a and image blocks. 

code that uniquely identifies that terminal to be present 50 The information transferred to the main memory 50 is 
on that key card, in addition to the encryption code. also simultaneously supplied to an accounting processor 
Alternatively, an update of the encryption code for the 60 which strips off the encrypted billing and statistical 
specific terminal can be supplied at periodic intervals by usage information included in each selected text, and 
telephone transmission. For this purpose, and for other passes this information to an accounting register 62. The 
purposes which will become clear from the discussion 55 accounting register 62 accumulates charges and also 
that follows, the customer terminal also includes a tele- may accumulate simple statistics on the types of data 
phone interface modem 36 and a user control keyboard selected by the customer. Alternatively, statistics may 
38. be accumulated and maintained by the central account- 
Inside the customer terminal 30 a communications ing department of the news service bureau 10. 
circuit 40, shown in FIG. 2, strips the data stream from 60 When a signal from the accounting signal source 14 is 
the carrier signal transmitted by the satellite 16 or the received by the communications circuit 40, the account- 
local station 20. The data stream is then processed by ing processor 60 receives a signal from the communica- 
the security circuit 42, which is controlled by the key tions circuit 40 that causes the accounting processor 60, 
card 34. The security circuit uses the machine-readable with the aid of a modem 66 at the customer terminal 30, 
cipher information on the key card 34 to retrieve the 65 to dial a predetermined telephone number which may 
clear text of the data stream that it receives. The key be provided on the key card 34 in machine-readable 
card 34 may also provide machine-readable information form. Dialing this telephone number establishes a data 
that controls the operation of the communications cir- link to the accounting department of the news service 
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bureau 10. Alternatively, the customer terminal 30 may data service may use separate encryption keys. Each 

be continuously connected directly to a telephone line information header section may include a prefix in the 

so that all customer terminals 30 can be automatically information ID code number to designate the service, 

polled sequentially by the accounting department to When the key card 34 is out of date, the security circuit 

retrieve the charge and usage information. Cryptogra- 5 42 will also be unable to decode the information signal 

phy and/or cryptographically protected checksums are provided by the communications circuit 40. 

desirable to protect the accounting transmission from FIG. 4 shows an alternative embodiment of the ac- 

interception and manipulation. counting functions indicated in FIG. 1. In FIG. 4 the 

In this embodiment the accounting processor 60 is customer terminals 30 are directly linked to telephone 

connected to a timer 68 which turns on an indicator 10 i mes via modems and are automatically polled by an 

light 64 as a warning to the customer that the key card electronic switch 80 in the accounting department on a 

34 for the customer's terminal 30 will become obsolete monthly basis. The accounting computer 82 tracks the 

in a given period, such as ten days. When the customer's status of the customer's account and, when payments 

payments are current, the accounting department will „ current> periodically issues the replacement key 

authorize ^the customer's continued use of the customer 15 ^ 34 that m nece ssary for continued use of the 

terminal 30 by issuing a new key card 34 required to cust0 mer terminal 30. 
operate that particular terminal after the next change in 

the encryption of the transmitted data. The new card General Concept of Invention 

can be > mailed to the customer for use when the indica- Publishers of technical, commercial, and business 

tor light is actuated. The change in encryption may be 20 information have fou ht for lhe control of lt in . 

announced by a message that is encrypted using the ^ since the comn f ercia| advent of ^ photocopier. 

t hi * ?^ C k ""n T nSmU i led ^, a ^ ^ iTl U In ^ cue of many of these publications, the result has 

S^^^JSSffJ^ been a I™*** subscription rate that threatens the 

^£v? *TZ y ' ♦ S 7 ? ? P ? L* ^ence of the publications themselves. The present 

odicaliy, or in response to an encryption code mismatch 25 . . , v . - 

detected in the security circuit, by the accounting pro- * vent ' on m f kes " f * s * le 10 chan S e ' he «momic5 of 

cessor 60 to the main memory 50. ™ format i™ distribution system and make far more 

The message can be a standard notice requesting that »f nation far more easily available than is currently 

the customer call the accounting department, or a mes- the 'f^ ^ inventl0n has . thc P otential to alleviate the 

sage tailored by the accounting processor 60 to the 30 P roblems °/ stora S e » copying, and copyright royalty 

individual account by reference to the billing informa- payments that are common headaches for many librar- 

tion stored in the accounting register 62. The message ies ' If t* oa <*cast capabilities are utilized to perform 

stored in the main memory 50 is then communicated to incremental updates to a distributed databank, the 

the customer through the facsimile converter 54 or the stored databank can be efficiently updated to maintain 

RS-232C interface 56 shown in FIG. 2. 35 its currency between issues of archival storage media. 

The encryption of the transmitted data stream is ^ present invention has the potential to eliminate 

changed periodically to discourage attempts to circum- P a P er Handling for specialized journals/publications 

vent the security provisions of the system, as well as to wlulc at the samc time allowing archival copies of the 

facilitate timely payments by customers. This method of information to be stored at designated repository librar- 

changing the encryption, and the use of individual, 40 i CSi 

encrypted reporting channels for accounting and indi- As would be expected, the specialized user comrauni- 

vidual, periodically changed key cards, provides much ties have developed highly sophisticated techniques for 

greater security for the information distribution opera- accessing the information in their information sources, 

tion than has been previously available. This reduces For technical users, these typically involve journal, 

the risk of operating a large-scale information distribu- 45 article title, author, date, keywords provided by the 

tion system without prompt financial support by cus- author(s), and a text search on the abstract, which is 

tomers and avoids the high overhead costs of dial-up available in commercial, computer search databank, 

data services. The legal community uses, among others, headnotes 

FIG. 3 is a schematic representation of the format of and citation trails, as well as specialized computer data- 

the data stream transmitted by the system in accordance 50 banks. Unlike the situation in the technical publishing 

with a presently preferred embodiment of the invention. community where new articles do not invalidate older 

In FIG. 3 a news article 70 is transmitted as a serial articles, although they may prove the older articles to 

block of information preceded (or followed) by a be in error, new legal decisions and laws can invalidate 

header section containing an additional code 72 which old case law and statutes rendering the latter obsolete, 

includes, for instance, the statistical reference data used 55 Correspondingly, the legal community has developed 

by the news service to analyze customer preferences or techniques to adapt to constant changes in the law. 

a linking code that permits items that exceed the capac- Organizations having to deal with governmental regula- 

ity of the information buffer 44 to be selected as a tions and requests for proposals are subject to even 

whole, rather than permitting the comparator 46 to greater information turnover, since this information can 

select only part of that news item. 60 be changed by statute or executive action. Efficient data 

The additional code 72 is preceded (or followed) by updating is mandatory for the viability of these busi- 

an encrypted charge code 74 which the accounting nesses. Timely distribution of update information be- 

processor 60 uses to accumulate customer charges in tween reissues of the reference databanks are critical for 

the accounting register 62. The charge code 74 is pre- these users. Omission protocols are required so that a 

ceded (or followed) by a security code 76 that permits 65 user will realize if a distribution is missed and can obtain 

access to the data to be restricted to a particular subset the information by other channels. In general, such 

of user terminals by disabling the decoding of the text search and information handling tools are well known 

by the security circuit 42. Alternatively each separate and do not require a detailed discussion here. 
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RF broadcast is a very inexpensive medium for dis- use of electronically read billing keys or cards, depend- 
tributing information, as long as there is enough demand ing upon the level of trust in the user's organization, 
to cover the fixed expenses. In urbanized areas single The retrieval unit would record both the article/refer- 
sideband FM broadcasting is available with a data ca- ence retrieved and the requestor billing code/electronic 
pacity of 19,200 baud/channel. Such a channel has a 5 key number in the accounting register. The monthly 
capacity of 170 MBytes/day (20% transmission over- invoice to the institution can provide the billing break- 
head, no repeats). This is adequate for the transmission down, allowing itemization of expenses by billing 
of a large amount of text based information even assum- codes. A user who did not want this information would 
ing multiple transmissions of such information for error not have to enter such billing codes. In essence, a billing 
correction. It is inadequate, however, for the transmis- 10 code is a user supplied comment field; primarily for use 
sion of large amounts of image based information. Mod- by the user. 

erate quality color images require about 128 KBytes In order to bill individually for each IP accessed from 
each. Black and white images require somewhat less the databank/datastream, it is mandatory, to provide 
storage. High quality, full page, color graphics require some kind of security so that users are required to use 
far more capacity, 1-3 Mbytes per picture, after coin- 15 the system of the present invention to access the infor- 
pression. In the case of very narrow interest/very small mation. Since the high or low density storage media 
niche markets, physical distribution of magnetic or opti- containing the information will be out of physical con- 
cal storage media could be the most cost efficient way trol after distribution into the field, where users may 
to update the databanks. Unless much higher bandwidth copy the media or transfer their contents to other elec- 
channels can be utilized, physical media distribution 20 tronic storage formats, it is preferable not to rely for 
may also be the most cost-efficient means of distributing security solely on the storage device at the user site, 
image intensive information, particularly if it is of inter- While effective security may be provided by using a 
est to a relatively small market. storage device which requires the physical insertion of 

The central concept of the present invention is to a mechanical or electronic key, or requires the elec- 
provide a system (method and apparatus) for distribut- 25 tronic entry of a user identification number to activate 
ing information to a user on a pay-per-package basis the device, preferably at least a portion of the infonna- 
rather than a pay-per-subscription basis, although any tion distributed to the user is encrypted, and the user 
desired mix of subscription and pay-per-package billing apparatus includes means for decrypting the informa- 
arrangements may be accommodated. To implement a tion selected and retrieved by the user, 
subscription service, the invention contemplates the 30 The high value of the protected data, the time avail- 
distribution of subscription specific broadcast keys or able to attack it, and availability of matched cipher- 
by having the central accounting facility not bill indi- text/plaintext data streams (whereby the ciphertext 
vidually for articles that satisfy the substitution criteria. stream can be directly read from the enciphered disk, 
The apparatus at the user site can examine the informa- while the output of the decryptfon device is the clear- 
tion package ("IP") header block for the classification 35 text stream) provides ample motivation and opportunity 
and description information required to determine the for sophisticated cryptographic assault. In addition to 
subscription classification. The apparatus can then de- having to provide strong cryptographic protection, the 
crypt and store any article within a specified subscrip- data security technology used with the present inven- 
tion. Of course, the apparatus can also apply additional tion is preferably very fast since it must deal with data 
criteria to IP's within the designated subscription to 40 being read from archival storage devices. Data rates on 
automatically winnow the desired information. Simi- the order of 1 Mbit/sec (125 KBytes/sec) are desirable 
larly, free access can be given to a designated class of for this application. The combination of speed and secu- 
information or archival media by having the central rity required for this market points to the use of dedi- 
accounting facility not bill for articles that satisfy cer- cated hardware, such as a data encryption standard 
tain criteria. It is even possible to combine the two 45 (DES) integrated circuit, for the cryptographic imple- 
billing modes if desired: requiring both a subscription mentation. Intelligent use may also be made of data 
charge and a per-package charge for information ac- compression and message keys to hinder sophisticated 
cess. This may be done using a double encipherment search attacks upon the system, 
system. Distribution keys can be changed and distrib- As in the case of the information broadcast system 
uted on a monthly basis, allowing paid-up subscribers to 50 described above, the security of the system billing con- 
remove the broadcast encryption from the broadcast trols and the assurance of the physical integrity of the 
information. However, access to the information would user apparatus should be maintained. Controls to pre- 
still require decryption using the appropriate keys, and vent the undetected alteration of phone line communi- 
billing on a per-package basis, Similarly, combined bill- cations with the apparatus, or user modification of the 
ing could be required for access to archival material. 55 apparatus itself, need to be very strong, since this is the 
The refusal of decryption by the user apparatus when its easiest route of attack upon the system. It should be 
accounting register is full, or when a specified time has assumed that an attacker is monitoring all telephone 
passed since the last authorization, can prevent a user communications and can interfere at will with the data 
from abusing the system. stream on the phone line. This makes desirable the use 

Most information research facilities, either private 60 of strong cryptographic block codes with error correct- 
(such as research laboratories, law firms, etc.) or public ing coding to transmit commands to the user apparatus 
(universities, medical institutions, etc.) require billing of from the central accounting (billing) office, and crypto- 
expenses against clients, project budgets, or research graphic checksums to validate information sent from 
areas. Correspondingly, they may employ accounting the user apparatus to the central accounting office, 
controls that allow them to track expenditures. This 65 While the decryption key in each unit accessing the 
type of cost allocation can be effected with the informa- same information will be the same, individual user units 
tion distribution system according to the present inven- will have their own individual identification numbers 
tion by means of a user entered billing code, or by the and communications keys. 
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Billing protocols are also preferably used prevent nary with 8K words reserved for message/article spe- 
abuse of the system. The user apparatus would contact cific vocabulary. The cost of this approach is merely the 
the central billing office on a regular schedule and/or memory requirement for the reference dictionary. If the 
when its accounting unit has crossed a set threshold. average length of a word is 8 bytes, 192 Kbytes are 
The user apparatus will not be able to decipher informa- 5 needed to store the common usage dictionary, 
tion if its accounting register is full or its internal clock In an enhancement of the information distribution 
is past a set time, displaying a message that it must system according to the present invention, it is neces- 
contact central billing if it is to provide further access to sary to include command codes to instruct the system 
the protected information. Upon contacting the central that graphical data or continuous tone images are start- 
billing system, the user apparatus downloads the list of 10 ing, notifying the system of the appropriate image type 
IP's retrieved and deciphered and their associated bill- so that the appropriate decompression techniques can 
ing codes, if any, and a cryptographic checksum block be applied. It is also possible to define shift characters so 
to verify that the billing information was not interfered that unique character strings can be left in place rather 
with (since an attacker could easily interfere with the than being placed in the message/article vocabulary, 
communications on the telephone line). After verifying 15 Such embeddings could be desirable for the inclusion of 
the billing information, the central billing office clears numerical tables or other unstructured data items, 
the accounting register in the user apparatus, and re- which would not be subject to use as search terms, 
loads subscription and broadcast keys, allowing the user Numeric data can be easily compressed from its ASCII 
apparatus to select, retrieve and decypher additional representation since any individual decimal or hexadec- 
IP's. Communications from the central billing office to 20 imal digit can be represented by a 4 bit **nibble", allow- 
the user apparatus are also protected by cryptographic ing a factor of 2 increase in packing density, 
protocols. 

To prevent echo attacks and frustrate crypto-analytic ArcWval Information Distribution System Embodiment 
assault upon the user apparatus command channel, the Before considering details of the system architecture 
central billing office preferably generates a random 25 it is important to review what functions it is called upon 
number (at least 8 bytes long) and supply it to the user to perform. Following the information flow during 
apparatus in the header block of its exchange. A mes- processing is a good way of seeing how the functions 
sage key is generated by enciphering the supplied ran- partition in the user apparatus. A basic flow chart for 
dom number with the individual user apparatus commu- the user apparatus, when used as a simple broadcast 
nications key, which both the user apparatus and the 30 data receiver and filter, is shown in FIG. 5. Data is 
central billing office know, using a strong block code as received by the broadcast receiver, which demodulates 
a transformation unit. The resulting block is used as the it, providing a digital data stream to the decrypt and 
message encipherment/decipherment key. Commands decompression module. After correcting for transmis- 
and instructions, such as "clear the accounting regis- sion errors the data is deciphered. If the text matches 
ter", or for reprogramming of the user apparatus, are 35 the desired search criteria, the article/reference is un- 
then transmitted to the user apparatus after encipher- packed, the billing information is entered into the ac- 
ment with this message key. It is very unlikely that counting (billing) register, and the article is read into 
anyone would break such a system, which is compara- the output buffer for user printing or other use. 
ble in security to interbank money fund transfers. The The corresponding flow chart for the user apparatus 
attacker's knowledge of the random string that was 40 when used as an archival information retrieval unit is 
enciphered to obtain the message key would be of no given in FIG. 6. In this case the protected archival 
use. The individual user apparatus encipherment key information is stored on high density media in conjunc- 
would never be transmitted over the telephone line. It tion with unprotected information. The unprotected 
should be noted that all communications are also prefer- information provides the primary access means for the 
ably protected by error correcting codes to minimize 45 protected information, comprising the indexes, ab- 
communications errors which would invalidate these stracts, headnotes, citation trails, titles, and the like for 
exchanges. all the protected information. The user normally uses 

The text portion of stored journal articles, govern- this information to access the protected information. If 
ment regulations, or legal reference material exhibit necessary, the user could decrypt the IP and conduct 
considerable similarity in the language from one arti- 50 searches on the full text of the article, but this is not 
cle/reference to another. This allows for specific and likely to be common or necessary. Once the user has 
highly optimized data compression techniques to be chosen an IP to access, the user (more particularly, the 
applied to the stored data. In the presently preferred user's software) loads the enciphered IP into a buffer 
embodiment of the invention the following scheme is storage and instructs the user apparatus to decipher it. 
used for English text: 128 common words and grammar 55 The user apparatus then enters the identification infor- 
structures are encoded in one byte, with the 8th bit mation into the billing register, reads the enciphered IP 
reserved as a flag to denote the use of two-byte encod- from the buffer, and writes the deciphered IP back into 
ing. The text is transmitted by first transmitting the the buffer for the user to access it. 
message specific dictionary, followed by a block of 8 FIG. 7 shows a flow chart for the more complex 
and 16 bit pointers, which point to common words (8 60 situation where stored archival information is coupled 
bit) or to common or message specific words (16 bits). with updating and broadcast search and retrieval; i.e. a 
32K words can be encoded with this scheme before combination of the two applications shown in FIGS. 5 
exhausting the dictionary. These words can be distrib- and 6. In this case, the archival information can be up- 
uted as desired among a fixed dictionary and a message dated either by information broadcast or by physical 
specific dictionary. The choice of this distribution is 65 media distribution. In either case, update information is 
subject to tradeoffs as to search efficiency, fixed dictio- stored in a buffer unit, probably a hard disk or read/- 
nary size, and message dictionary size. For example, write optical storage unit. The user's search software 
24K words can be stored in the common usage dictio- accesses the buffer unit before accessing the archival 
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media to determine if the information in question had fast (one Mbit/sec.) and allows the use of a small diame- 

been updated and, if so, to obtain the current informa- ter, inexpensive cable to connect the reception and 

tion. In addition to allowing the updating of archival demodulation unit with the buffer and controller of the 

information, this application allows the search for and broadcast data reception unit. 

capture of information that meets chosen search crite- 5 Since most of the information users are normally 

ria, as shown in FIG. 5. Because of the substantial stor- located in urban areas where FM sideband distribution 

age resources that are available to the user unit in this may be used, it is sensible to make the FM sideband 

situation, captured information can be easily stored for broadcast receiver attach mechanically to the control 

later manipulation and use. unit, probably using matching hardware so that the two 

It should be noted here that, with the exception of 10 units lock together with the data output of the receiver 
searching for words or terms within the enciphered feeding directly into the data input of the control unit, 
information section, the search on databanks is per- Telephone communication with the central (account* 
formed by user software, on the user hardware. The ing) office is provided by a modem in the user's work- 
databank is indexed to support the traditional search station, where such is available, or a modem built into 
techniques used by the consumers of information (title, IS the standalone user interface unit, 
abstract, author, and keyword in technical works, head- The control unit can communicate with a standard 
notes and citation trail in legal publishing, etc). The user workstation via the SCSI bus. The SCSI bus proto- 
databank will probably have the abstracts/headnotes, col is well established so that SCSI has become the basic 
which are in cleartext in the databank, indexed in sepa- interconnect bus for technical workstations as well as 
rate index files. This would allow word or term 20 some microcomputers such as the Apple Macintosh and 
searches at speeds far in excess of the capabilities of the Next microcomputers. While it is not the basic intercon- 
system retrieval speed itself. nect bus for the IBM PC family at this time, it is exten- 

The three principal components of the user appara- sively used in high performance PC units and SCSI bus 
tus, which will now be described in detail, are the interface cards for the IBM PC family are readily avail- 
broadcast receiver, the so-called "control unit" and the 25 able. The resulting system structure is shown in FIG. 9. 
so-called **user interface unit" or, simply, "user unit". If SCSI interfaces frequently have speeds in excess of 10 
current information updates are not broadcast to the MBits/sec. To not slow down the system excessively, 
user apparatus via electromagnetic radiation or cable information flowing into and out of the control unit is 
but are transmitted (e.g. sent through the mails via low preferably extensively buffered. It is preferable if arti- 
density storage media) it is possible to dispense with the 30 cles/references are treated as single entities, so that they 
broadcast receiver. Similarly, if the control unit is con- are read into and out of the control unit in single opera- 
nected to a standard, commercial workstation such as tions. This requires that the buffer be large enough to 
the Apple Mcintosh, the IBM PC or PS/2, or the Next contain the vast bulk of articles/references. As long as 
microcomputer, it is not necessary to include a user the articles/references that are being retrieved are not 
interface unit. 35 image based, a buffer size of about 512 KBytes is nor- 

The control unit, which is preferably separately mally adequate, 
housed in a compact metal box, contains the search Finally, the user interface unit, or "user unit", also 
engine, decryption circuitry, billing and control regis- communicates with the control unit via the main SCSI 
ters, and associated circuitry. This unit is common to all bus interface. As mentioned above, the user unit pro- 
user apparatus simplifying the manufacture and support 40 vides the modem communications to the central ac- 
of the system. The control unit is provided with two counting office, as well as access to output devices such 
SCSI interfaces: One SCSI interface communicates as a facsimile machine or printer. It also controls a dis- 
with the user workstation, which can be the either the play screen, touch screen/programmable keyboard (if 
standalone user interface unit or a standard workstation; present), keyboard access (if no touch screen is present), 
the other SCSI interface supports the broadcast data 45 and serves to translate the user commands into corn- 
reception unit and an optional data storage unit. The mands for the control unit. 

two-way communication capability of an SCSI bus The presently preferred embodiment of the informa- 
allows the control unit to talk to the broadcast data tion distribution system according to the present inven- 
reception unit, as well as vice versa, to reset the receiver tion, which provides both archival information and 
if it loses synchronism and to set a receiver IP selection 50 current, update information at the disposal of the user, is 
filter, if desired. The block structure of the communica- illustrated in FIG. 10. Details of certain elements of this 
tions of the control unit with other hardware compo- embodiment — namely, the broadcast data reception 
nents is shown in FIG. 8. Not shown in this diagram is unit, the control unit and the user unit — are shown in 
an electronic key port in the control unit for billing FIGS. 11, 12 and 13, respectively, 
authorization. This port is implemented by another 55 As shown in FIG. 10, the system comprises the con- 
serial line or by a parallel key port. trol unit 100 which serves as a central, coordinating 
If the broadcast reception unit must be arranged at computer for the entire system. The control unit re- 
too great a distance from the control unit to permit use ceives current, update information from the data recep- 
of an SCSI bus, as may occur if a satellite antenna is tion unit RF broadcast receiver 102, either via electro- 
required for satellite reception, the broadcast data re- 60 magnetic radiation received by an antenna 104 or via 
ception unit may be partitioned into a reception and electrical signals transmitted by a cable 106. 
demodulation unit at the antenna site and a buffer and The control unit communicates with all other de- 
controller near the control unit. The two pieces of the ments of the system via two SCSI buses: a main SCSI 
broadcast data and reception unit are linked by a serial Bus 1 and a backup SCSI Bus 2. The backup SCSI Bus 
link, such as an RS-422 line, allowing data to be fed to 65 2 couples the control unit with the broadcast data re- 
the buffer and controller for examination and transfer to ception unit 102 and the optional storage unit 110. This 
the control unit. The RS-422 line is a differential input, storage device 110 is preferably a high speed read/write 
twisted pair serial data cable. This transmission line is memory such as a dynamic RAM. 
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Connected to the main SCSI Bus 1 are a variety of erased or changed by the user. If the control unit is 

storage devices such as a hard disk drive 112, floppy disconnected from the system and returned to the fac- 

disk drive 114, streaming tape drive 116, a CD-ROM tory, the billing register will retain a record of the fees 

jukebox 118 and an optical read/write storage device owed by the user. 

120. It is contemplated that current information updates 5 The control unit operates to receive information 

may be supplied by a floppy disk or streaming tape, packages (IP's) from a first, protected storage device, 

hence the requirement for the storage devices 114 and such as one of the devices 112, 114, 116 and 118, via the 

116. It is contemplated also that archival information SCSI Bus 1 and to place selected IP's in a second stor- 

will be supplied via CD-ROM, hence the requirement age device, such as its buffer RAM or working RAM 
for the CD-ROM jukebox. Information updates will be 10 and/or the backup storage unit 110 via the SCSI Bus 2. 

read into the system and stored on a hard disk for rapid The processor of the control unit, under control of a 

access, hence the requirement for the hard disk drive stored program, performs the selection and retrieval 

112. Additional, high density storage is provided, if function and stores the use fees to the billing register for 

necessary, by the optical read/write storage device 120. the information packages transferred from the first stor- 

AI1 of the storage devices 110-120 are conventional 15 age device to the second storage device, 

and currently commercially available. Preferably, the processor also stores in the billing 

Also connected to the main SCSI Bus 1 is either a register the identity of each IP that is transferred to the 

conventional workstation 122, such as an IBM PC, second storage device. 

PS/2, Apple Macintosh or Next computer, or a standa- As mentioned above, a conventional workstation 

lone user interface unit ("user unit") 124 which will be 20 may be used to provide the user interface to the system, 

described in detail hereinafter. The purpose and opera- In the absence of such a workstation, a dedicated, stan- 

tion of the workstation 122 and user unit 124 are essen- dalone user interface unit 124 may be provided as is 

tially the same: to provide a keyboard and display inter- illustrated in FIG. 13. Like the control unit 100, this 

face to a user; to provide a hard copy output (via user unit is also a conventional microcomputer which 

printer, facsimile machine or the like) of the information 25 includes an SCSI port for communication with the 

selected by the user; to provide an interface with a local control unit and other devices on the SCSI Bus 1; a 

area network (LAN) which is connected to a file server modem for telephone communication with the central 

132 as well as to other workstations 130, monitoring office host computer and other remote systems; and a 

devices and the like; and to provide a modem interface LAN interface for communication with other worksta- 

to a conventional telephone line. 30 tions and a file server 132. 

Finally, hard copy output devices such as a mechani- The user unit also includes a data entry device, such 

cal or laser printer, facsimile machine or the like may as a keyboard, and a display device, such as a CRT or 

also be connected to the main SCSI Bus 1. In this way, LCD panel. 

the SCSI interface of the user unit 124 or workstation Pursuant to requests by the control unit, the user unit 

122 may be used to output data to this hard copy output 35 is capable of communicating via its modem and the 

device telephone line with (1) the host computer 134 at the 

The broadcast data reception unit 102 is shown in central office; (2) another user unit 136 which is remote 

detail in FIG. 11. This unit functions in a quite conven- from the user unit 124; and (3) a dial-up database facility 

tional manner to receive and decode a digital data 138 such as Dialog or Lexis. 

stream from an FM or television carrier signal. This 40 As indicated above, the user unit may also communi- 

information is "piggy-backed" on a single sideband, in cate with a printer 128 either directly or via the SCSI 

the case of FM, or in the vertical blanking interval Bus 1. 

(VBI) in the case of a video signal. Equipment of this The operation of the information distribution system 

type is conventional and currently commercially avail- is governed by a master program contained in the con- 

a ^ e - 45 trol unit 100 and a subsidiary program contained in the 

If desired, error detection and correction can be per- user unit 124 (or workstation 122). This program will 
formed on the decoded digital data stream under con- now be explained in connection with FIG. 14. 
trol of a microprocessor. The data stream is then sup- When the buffer RAM of the control unit is supplied 
plied to the control unit 100 via the SCSI port and SCSI . and loaded with an IP, the sending unit (broadcast re- 
Bus 2. The receiver may be reset if it loses synchronism 50 ceiver or user unit) supplies an instruction code to in- 
via the SCSI Bus 2 and SCSI port. form the control unit what must be done with the IP. 

The control unit is, pure and simple, a microcomputer The control unit first examines this instruction code 

to which has been added a hard wired decryption pro- to determine whether it came from the broadcast re- 

cessor (such as a DES integrated circuit) for decrypting ceiver or the user unit. If the instruction code came 

the information packages selected by the user. FIG. 12 55 from the broadcast receiver, the control unit determines 

shows the preferred organization of this unit which whether it should be stored as information received 

includes a main SCSI port and a backup SCSI port. The pursuant to a specified subscription or as a current up- 

control unit also includes (1) a buffer RAM for receiv- date to the stored archival information. If the IP is to be 

ing entire information packages (IP's) from the broad- stored, the control unit allocates a location in the hard 

cast receiver 102, the user unit 124 (or another worksta- 60 disk memory and executes a store instruction. 

tion)and/or from the main or optional storage units and If the broadcast information does not need to be 

(2) a working RAM for processing (e.g., key word stored, the control unit determines whether it meets the 

matching) these IP's. user's search criteria. If not, the information is com- 

Finally, the control unit includes a "billing register" pletely ignored and the control unit buffer is cleared for 

which accumulates and stores the user fee and other 65 the next IP. 

account and statistical information for eventual trans- If the user's search criteria are met, meaning that the 

mission to a host computer at a central office. The bill- user would like to view the IP on the display screen, or 

ing register is preferably an EEPROM which cannot be to print a hard copy, the control unit initiates a sequence 
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of operations which are identical to those carried out 
when the IP has been selected and retrieved from local 
storage by means of the user unit. 

Initially, the control unit determines whether the 
user's financial account is up-to-date. If not, the user 
unit, and thus the user, are notified and all further opera- 
tions by the control unit are interrupted until the out- 
standing account is cleared up. 

If the account is current, the IP identification and 
user identification are entered into the accounting (bill- 
ing) register and decryption of the IP is commenced. 
During decryption, the IP specific dictionary is con- 
structed from the cleartext information. Once the spe- 
cific dictionary is completed, the control unit decom- 
presses the IP test as it leaves the decryption processor. 

The decrypted and decompressed text of the IP is 
written into the control unit buffer. When the IP pro- 
cessing is complete, the user unit is notified that the IP 
is ready for loading via the SCSI bus. Also, if the billing 
register is not full, the user unit is also notified. 

The cleartext IP is then transmitted to the user unit if 
it is free to receive this information. If the user unit is 
unable to unwilling to respond, the IP is temporarily 
stored into the back-up storage unit 110. 

The pay-per-package accounting system in the infor- 25 
mation distribution system according to the present 
invention is illustrated in FIG. 15. At periodic intervals, 
or when the billing register is nearly full, the control 
unit transfers the billing register contents to the user 
unit for transfer to the central accounting office. Prior 30 
to transfer, the control unit generates a verification 
block key and determines the billing register verifica- 
tion block to provide security for the billing register 
contents. 

The user unit then dials up the central office via its 35 
modem and the telephone line and transfers the verifica- 
tion key, billing register contents and the verification 
block to the central office. The verification block is 
checked at the central office to ensure that the transmit- 
ted data is valid. If the data is not valid, the central 40 
office requests the retransmission of the billing data 
block. • 

Once valid information is transmitted, the central 
accounting office invoices the user for the information 
selected, retrieved and used. For example, the central 45 
office can print and mail an itemized invoice, or it can 
transmit the invoice directly to the user unit via the 
telephone connection for printing at the user unit. 

Thereafter, the central office determines the next 
message key and then enciphers a "clear billing regis- 50 
ter" message with this message key. The enciphered 
message is then transmitted to the user unit which, in 
turn, passes it directly to the control unit. The control 
unit loads the message key, deciphers the message and 
carries out the command to clear the billing register. 55 
Finally, the control unit instructs the user unit to termi- 
nate the telephone connection. 

In the case where the information packages (IP's) are 
transmitted by broadcast, the total length of an IP 
header block is preferably 64 bytes. The first 12 bytes 60 
are a synchronization string to allow a receiver to syn- 
chronize to the broadcast data stream. The next 2 bytes 
are the block count of the IP (its length in units of 32 
byte blocks, not including the header block). The next 
12 bytes are a message key. The following 22 bytes 65 
contain the article identification and classification infor- 
mation. The next 8 to 12 bytes are a checksum for the IP 
described by the header. The last .8 to 4 bytes are a 



checksum of the IP header itself. These checksums 
allow the validation of the IP and the IP header. 

It should be emphasized that the IP header format 
may be varied, as desired, in accordance with the sys- 
tem requirements. 

The preferred byte allocation is shown in the follow- 
ing Table: 

TABLE I 

Broadcast IP Header 



xxxx 




xxxx 


synchronization block 


xxxx 




XX 


IP block count 


xxxx 


message key 


xxxx 




XX 




XXXX 




XXXX 


IP identification and 


xxxx 


classification information 


xxxx 




xxxx 




xxxx 




xxxx 


IP validation block 


xxxx 




xxxx 


IP header validation block 



In the case of archival information packages (IP's), 
much less header information is needed. If the user 
software accesses the abstracts/headnotes, the informa- 
tion that is needed in the IP header is the message key, 
an IP identification number, and an IP validation block. 
This permits the use of a 32 byte header block. 

The IP according to the present invention thus has a 
simple 3 part structure: The header block, the com- 
pressed dictionary, and the text block. If H represents 
the header block, D represent data blocks in the dictio- 
nary, and T represents data blocks in the text portion of 
the IP, the IP can be diagrammed in the following man- 
ner. The simplest structure for the IP is the header, 
followed by the dictionary, followed by the text block: 
HDDDDDDDDDDDDDDDDDDDDDDDDDD- 

DDDDDTTnTTTiTT'rrrjrrrirri titi- 

TTT 

TTTTTTTITTTTITTrm 

TTTTTTTTTTTTTTTl'lUl'IlUllT'TTTT 
If block transposition is used to disrupt the message 
structure and increase the cryptographic resistance of 
the system, this simple structure is made apparently 
random, although the header will still appear as the lead 

block: 

HTTDlll'DTD l'l'Il l riTTDD l I l i I I i UTT- 

TDll 11 1UTTTDD1 11 1 lllT Dl 1 1 11 D 

DDTfTTDT? TI TnTDTDTTDTTTDDDTT- 

T TD' A' l'1'1 DI ' l' l'I DTTDTP TTTDTI TI DTDT 

DTTTDTDTTDTTTDTTT 
In this case it is necessary to use the keys to determine 
the transpose mapping so that the blocks can be fed 
through the decryption and decompression processors 
in the correct order. 

The accounting (billing) register structure is also 
quite simple. This register contains a list of user access 
codes (if any), the associated IP identification numbers, 
as well as the IP prices, if desired (although the central 
billing office can look the prices up in its central data- 
bank,) The advantage of providing IP prices at the user 
site is for user convenience in selecting each IP and to 
maintain a local billing total that registers the current 
total billing amount. It is unlikely that publishers will 
want any more information be provided to users. 12 
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bytes are adequate for identifying a given IP and 4 bytes ent invention, is the ability to call up a remote host 

are adequate to identify an arbitrary user. Thus, the computer, or a dial-up database, for information which 

billing register preferably has the following structure: i s not stored locally in the system. This is accomplished 

TABLE II via telephone line by means of the modem in the user 

U u u u 11 1 1 1 1 1 1 n 1 1 5 un ^ t - Preferably, a transaction record is maintained of 

uuuiniuuiiiiii each call to a remote database and such transaction 

UUUuniinilllii record is stored in the billing register for periodic trans- 

.. .. . . . .. '. ['. '.'.]'. '. '.'. [[] mission to the central office. 

As a further optional feature of the information distri- 

UUUUiiiimniii ■ 10 bution system according to the invention, the user unit 

can transmit information packages (IP's) directly to a 
In this Table U represents the user ID bytes and I repre- remote user unit, either in encrypted or in cleartext 
sents the IP identification bytes for a given IP. The form ' Ag^n, this transmission can be effected via tele- 
billing register is preferably implemented either as a phone line with aid ofthe modems at the respective user 
battery-backed CMOS RAM chip or as an EEPROM, units - a user fee may be added to the billing register, 
which is capable of lifetimes of 10,000 cycles (200 years As a still further optional feature of the information 
at 1 cycle per week). distribution system according to the present invention, 
As needed and desired by users of the information the user unit may be integrated into a local area network 
distribution system, other optional features may be (LAN) and may communicate directly with other 
added to the system by providing appropriate stored workstations and/or a file server by its LAN interface, 
programs in the control unit and user unit. For example, As indicated previously, a record of all transactions 
by providing a suitable encryption algorithm, a docu- with other workstations and a file server may be main- 
ment generated by a user may be encrypted for its pro- tained in the billing register for periodic transmission to 
tection and security while stored in the system, e.g., on the central office. The IP's received from a dial-up 
the hard disk 112, and subsequently decrypted and read 25 database, a remote user unit, other workstations and a 
out as cleartext by an authorized user (recipient). In- file server may be integrated with the IP's stored in the 
stead of providing an encryption algorithm, it is also local storage devices of the information distribution 
possible to use encipherment capable integrated circuits system or they may be segregated and stored in separate 
with the associated encipherment ROMs. locations or devices at the local site. Preferably, user 
m It!cS system as an encrypted user docu- fees m charged for certain infonnat j on packages (IFs) 
ment is preferably defined in a document header block, hed t0 the locaI d whi , e other Ip £ ^* ^ 
£ Till ^££%f?* mformanon on the me P n P ts generated by thc ' uscr> may bc ^ m the sys . 

^jl^^^x as sssss. rar rieved by the user without the ° f 

the billing register. The agreed upon key is preferably ™*?™ U °" distribution system which fulfills all the 

supplied to the control unit when the document is en- ° bj * C l S ™ d *™*&* sou fiht therefor. Many changes, 

tered allowing the control unit to generate a message modlficat ' ons > variations and other uses and apphca- 

key and encrypt the document with the enciphered 40 t,0nS of the subject invenUon will, however, become 

message key. The user unit then constructs the header ?° those skilled in the art after considering this 

block from the message key, the document validation specification and the accompanying drawings which 

block, provided by the control unit, the document iden- d * sclose the preferred embodiments thereof. All such 

tification information, the sender and recipient informa- Ganges, modifications, variations and other uses and 

tion, and the header validation block, which the user 45 a PP h cations which do not depart from the spirit and 

unit calculates. scope of the invention are deemed to be covered by the 

The information distribution system according to the invention which is limited only by the claims which 

present invention also lends itself to monitoring and ^o\\ov/. 

controlling the use of information. This function is most What 1S claimed is: 

easily accomplished by requiring each user to enter a 50 t In a system for distributing information to a sub- 
personal identification code (PIC) into the system via scriber location, said system including a broadcasting 
the user unit keyboard. Stored within the system, for station and a central billing station, said broadcasting 
example in the working RAM of the control unit, are station including transmitting a serial data stream in- 
the PIC's of all users who are authorized to receive eluding a plurality of information blocks, each informa- 
information. The processor of the control unit thus 55 tion block including an encrypted information portion 
compares the PIC entered by each current user with the and a charge code portion, a method comprising: 
PIC's of the authorized users and enables operation of receiving said serial data stream; 
the system by the current user if these PIC's are equal. storing a search key word selected by said subscriber, 
In any case, by maintaining a record of the PIC of said search key word representing a desired word 
each current user, this PIC may be added to the billing 60 pattern contained in information blocks of interest 
register in association with the identity of each IP re- to said subscriber; 

trieved from the system by that user. The identity of searching said received serial data stream at said sub- 
each user of the system, as well as the IP's retrieved and scriber location using said stored search key word 
the type and amount of usage by each user, will then be to select an information block by finding a match 
transmitted to the central office together with the user 65 between said search key word and said information 
fee information. block; 

Another optional feature easily designed into the decrypting said encrypted information portion of said 

information distribution system according to the pres- received information block; 
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